H3C S5560X-EI Series Configuration Manual

Also see for S5560X-EI Series: Command reference Installation guide

Contents

H3C S5560X-EI Series Configuration Manual Manual pdf 19 page image

13Step Command Remarks2. Disable remote-MACaddress learning.vxlan tunnel mac-learningdisableBy default, remote-MAC address learningis enabled.When network attacks occur, disableremote-MAC address learning to preventthe device from learning incorrect remoteMAC addresses. You can manually addstatic remote-MAC address entries.Enabling local-MAC change loggingLocal-MAC change logging enables the VXLAN module to send a log message to the informationcenter when a local MAC address is added or removed.With the information center, you can set log message filtering and output rules, including outputdestinations. For more information about configuring the information center, see NetworkManagement and Monitoring Configuration Guide.To enable local-MAC change logging:Step Command Remarks1. Enter system view. system-view N/A2. Enable local-MAC changelogging. vxlan local-mac report By default, local-MAC changelogging is disabled.Confining floods to the local siteBy default, the VTEP floods broadcast, unknown unicast, and unknown multicast frames receivedfrom the local site to the following interfaces in the frame's VXLAN:• All site-facing interfaces except for the incoming interface.• All VXLAN tunnel interfaces.To confine a kind of flood traffic to the site-facing interfaces, disable flooding for that kind of floodtraffic on the VSI bound to the VXLAN. The VSI will not flood the corresponding frames to VXLANtunnel interfaces.To confine floods to site-facing interfaces for a VXLAN:Step Command Remarks1. Enter system view. system-view N/A2. Enter VSI view. vsi vsi-name N/A3. Disable flooding for theVSI.flooding disable { all |{ broadcast |unknown-multicast |unknown-unicast } * }By default, flooding is enabled for a VSI.